Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/cOldg5fOaXQ_e0TuTeIrCTVChb0.roa
File: cOldg5fOaXQ_e0TuTeIrCTVChb0.roa (raw, json)
Hash identifier: F/pKdsnJqSZr9zlVkoewvuLZMlN6kpFvQLxXd/RKM4g=
Subject key identifier: 70:E9:5D:83:97:CE:69:74:3F:7B:44:EE:4D:E2:2B:09:35:42:85:BD
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01892A3827E916493C44D99D665CA892D746
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/cOldg5fOaXQ_e0TuTeIrCTVChb0.roa
Signing time: Thu 06 Jul 2023 08:01:10 +0000
ROA not before: Thu 06 Jul 2023 08:01:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 89.23.92.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.80.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
89.23.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 22:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:38:27:e9:16:49:3c:44:d9:9d:66:5c:a8:92:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 6 08:01:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70e95d8397ce69743f7b44ee4de22b09354285bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:f7:3e:7d:e4:c2:c0:bb:d4:bb:98:a6:4f:
ec:eb:78:6a:ed:00:84:3f:88:1f:cf:db:c6:98:13:
e3:3d:08:14:0d:e4:66:c8:91:b2:c5:60:8e:46:cd:
04:81:24:53:96:e3:9c:b0:e0:9a:57:0f:5d:75:74:
33:15:3f:b2:d1:df:46:5d:0f:07:94:34:11:6b:c5:
5c:98:fd:90:86:a1:2e:69:cc:a1:b7:bc:84:fe:d1:
fe:b4:c7:3a:e3:2e:0e:60:ec:0e:a4:3f:72:b8:a2:
48:3c:7f:e0:6a:16:78:48:b3:2a:c4:88:9c:7e:72:
31:b2:94:35:82:fe:cf:58:c7:f6:82:15:5a:4a:42:
89:30:e1:9f:d0:fa:63:79:58:ab:b3:9b:4c:d1:ec:
e2:bc:7e:ab:1d:f6:8b:70:d9:06:99:61:61:dc:14:
64:43:db:b0:6d:5a:f3:ff:69:cc:03:eb:e7:de:ef:
ec:0b:f1:a4:e8:5e:28:a8:b2:37:35:ae:d6:73:8b:
96:72:bb:94:ed:e6:25:1f:ea:30:98:bc:24:dc:92:
c6:a7:b5:eb:20:ee:43:67:96:7b:0e:89:ad:29:1f:
7e:b1:6f:7a:ed:c9:8b:c6:56:24:a2:59:6a:f3:69:
7c:e3:a6:ea:7e:3a:f4:2c:4a:31:ce:04:1d:e4:8a:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:5D:83:97:CE:69:74:3F:7B:44:EE:4D:E2:2B:09:35:42:85:BD
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/cOldg5fOaXQ_e0TuTeIrCTVChb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0-89.23.81.255
89.23.84.0/23
89.23.87.0/24
89.23.92.0/24
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fe:b6:1f:49:9a:51:53:cb:33:1e:4a:40:22:cf:f1:dc:47:
f5:bd:6e:ad:5c:a3:8f:36:19:86:55:65:61:c2:0a:a6:6e:c3:
80:ea:c1:78:2f:7f:14:16:1f:6a:41:11:57:d6:14:3f:ff:30:
dd:4f:7d:01:16:01:d3:8c:c0:24:3f:5d:35:a3:b3:d5:f7:1b:
47:3d:c5:34:49:7a:57:81:e6:67:e2:c5:e8:8b:d1:40:20:e9:
19:cb:b2:98:c5:5b:a5:ba:8f:45:d7:a0:15:f1:6f:84:70:f2:
93:33:4d:82:aa:7b:71:c8:e0:10:c7:e0:4c:f6:cd:78:5d:e1:
a3:b8:43:d4:17:c5:5f:19:35:fc:37:e9:2e:b9:c3:f5:e1:ba:
cb:03:08:58:a4:c6:7e:17:7e:69:34:6d:4d:1f:70:00:27:db:
16:de:56:3c:cc:71:c2:5b:73:14:05:ff:d8:68:23:9f:20:70:
b4:8f:61:dc:d8:0e:a8:80:a9:68:4f:75:ff:4c:91:1a:2e:5c:
36:12:52:fe:77:44:cf:9f:03:c6:5e:c9:23:60:e3:79:f4:55:
24:ed:1a:77:59:1b:2f:b0:3c:8e:5b:3d:f1:ac:58:1c:14:8a:
0f:ce:69:1b:a9:de:d2:21:ee:6d:4c:36:96:22:91:9f:b3:69:
cb:cf:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org